PT-2023-5784 · Acronis · Acronis Cyber Protect 15+1
CVE-2023-44157
·
Publicado
2023-09-27
·
Atualizado
2023-09-28
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Acronis Cyber Protect 15 versions before build 35979
Description
The issue is related to local privilege escalation due to insecure folder permissions. This could allow an attacker to elevate their privileges.
Recommendations
For Acronis Cyber Protect 15 versions before build 35979, update to a version that includes the necessary security fixes to address the insecure folder permissions issue.
Correção
LPE
Incorrect Default Permissions
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Acronis
Acronis Cyber Protect 15